topic Re: ssh not allowing..!!! in Operating System - HP-UX

ssh not allowing..!!!

Justin_132 — Wed, 14 Dec 2005 15:26:51 GMT

Hi Admins,

I got some users for whom i had generated dsa keys in their home directories. Im running SSH with protocol ver.2. Though I appended the authorised_keys of one user with other users key(dsa),still Im prompted for password. This is within a system and not between other systems. How can I login from one normal user to another without prompting password(of same group)..

Just-In

Re: ssh not allowing..!!!

Steven E. Protter — Wed, 14 Dec 2005 15:43:49 GMT

Shalom Justin,

The most common cause of this is permissions on the .ssh/ directory.

Attaching a word doc and linking a power point presentation that should help you debug the whole thing.

http://www.hpuxconsulting.com/5004.ppt
Download it, don't try and open it online with Firefox, something strange may happen.

SEP

Re: ssh not allowing..!!!

Justin_132 — Wed, 14 Dec 2005 16:10:24 GMT

Hi Steve,

Im able to do that between one server and the other and it works. But my requ. is to have between users of same group in the same server. Not with any other servers locally.
Just tell me, In this case why should I use dsa public key for authuntication, since im not going to connect any server outside.

Hope you got me..Just-In

Re: ssh not allowing..!!!

Justin_132 — Thu, 15 Dec 2005 16:04:47 GMT

Hi Admins...

Any Hopes For This...!!!!!!!

Just-In

Re: ssh not allowing..!!!

Geoff Wild — Thu, 15 Dec 2005 16:16:09 GMT

Yes, there is hope - you should be able to do this.

What version of ssh are you using?

Rgds...Geoff

Re: ssh not allowing..!!!

Jeff_Traigle — Thu, 15 Dec 2005 16:26:21 GMT

You mentioned you created the authorized_keys. Assuming that's correct and all permissions were double checked as Steven mentioned... do you have PubkeyAuthentication set to yes in /opt/ssh/etc/sshd_config? If not, that would cause sshd to prompt for a password even with the authorized_keys set up properly.

Re: ssh not allowing..!!!

Sanjay_6 — Thu, 15 Dec 2005 16:36:53 GMT

Hi Justin,

say you are user1 and want to login as user2 on the same server or another server, you need to put your keys (user1 keys) into the authorized_keys of the other user (user2).

Hope this helps.

Regds

Re: ssh not allowing..!!!

Justin_132 — Thu, 15 Dec 2005 16:57:16 GMT

Hi Admins,

I did : (User1 and User2 are in same group)

- Generated dsa keys for User1 and User2
from their own logins,

- Check the permissions for the auth.._key files for User1 and User2,

- Appended auth.._key files of both users with their resp. dsa.pub key,

As I said before, I got absolutely no probs between other systems. Im not able to do within the system.

Hereby attached my sshd_config file.

Just-In

Re: ssh not allowing..!!!

guna_1 — Fri, 16 Dec 2005 00:49:24 GMT

Hi,

I can see from your sshd config file , the hostkey for DSA is hashed , you have to enable that one .

your are able to connect to other m/c because that your are acting as client , this config file will not be used .

sshd_config will be used by sshd daemon , which is listening for client requests.

You get more err info if you have started your server daemon is debugg mode by adding -ddd option while starting.

Regds,
Guna

Re: ssh not allowing..!!!

Justin_132 — Fri, 16 Dec 2005 12:53:03 GMT

Hi Guna,

# HostKey for protocol version 1
#HostKey /opt/ssh/etc/ssh_host_key
# HostKeys for protocol version 2
#HostKey /opt/ssh/etc/ssh_host_rsa_key
HostKey /opt/ssh/etc/ssh_host_dsa_key

I have changed my settings...but stil no grace from GOD...!!

Just-In

Re: ssh not allowing..!!!

guna_1 — Sun, 18 Dec 2005 22:02:21 GMT

Hi Justin,

1. Did you restart your service after change in config file ?
2. Did you check errors in the debug mode ?

The errors in the debug mode will point out the problems directly.

If you find any errors in debug mode , can you post the error messages ?

REgards,
Guna

Re: ssh not allowing..!!!

Justin_132 — Sun, 18 Dec 2005 22:19:55 GMT

Hi Guna,

I have restarted sshd after the change in ssh config file. The o/p in the debug mode is,

debug1: sshd version OpenSSH_3.9 [ HP-UX Secure Shell-A.03.91.002 ]
debug1: read PEM private key done: type DSA
debug1: private host key: #0 type 2 DSA
debug1: rexec_argv[0]='/opt/ssh/sbin/sshd'
debug1: rexec_argv[1]='-d'
debug1: Bind to port 22 on 0.0.0.0.
Server listening on 0.0.0.0 port 22.

For my eyes, it seems DSA key evaluation is done w/o errors..

Just-In

Re: ssh not allowing..!!!

guna_1 — Sun, 18 Dec 2005 22:29:43 GMT

Hi,

Yes it is listening without any problem ,

Try to connect from outside or locally from .ssh user logins ,

if it is failed , the debug mode tells exactly where it is failing

it will tell clearly about any one of the following misconfigs

1. any permission problem on .ssh dir

2. Key mismatch ( RSA or DSA )

3. The particular user's key is not imported

4. it looking for password authentication not public key method.

if you started service in debug mode , you have restart your service for every connection , if you want detail debug report , use -ddd.

REgards,
Guna